On the Complexity of Matrix Multiplication over Rings of Skew 
Polynomials over Finite Fields 


1 Introduction 


In this work we will explore the multiplication of matrices of skew polynomials over a finite field Fy. 
In particular, we will examine the implications of a number of algorithms on the bit complexity of 
matrix multiplication and determine whether there are any improvements to naive estimates based 
on black-box matrix multiplication algorithms. 

Throughout this work we work over a pair of finite field Fy C Fgn. We let o denote an automorphism 
of F gn fixing Fy. We define the ring of skew-polynomials Fn {x; a} to be the set of polynomials in the 


variable « with coefficients in Fg», an a;x' subject to the commutation rule va = o(a)x. Fan {a3 o}<a 
denotes skew polynomials with degree strictly less than d with similar notation for <, >,=, etc. 


1.1 Algorithmic Background 


For analyzing the complexity of operations conducted over finite fields, an algebraic model counting 
base field operations is typically used. However, there are certain cases where a precise algebraic 
description is unsuitable. Of particular relevance to operations over skew polynomials is Kedlaya and 
Umans’ celebrated modular composition algorithm [KU08]. Given polynomials f,g,h € F,[T] each of 
degree at most d, the modular composition algorithm computes f(g) mod h. The classical algorithm 
due to Brent and Kung uses O(d+t)/ ?) field operations in Fy. The Kedlaya & Umans algorithm does 
not admit a simple algebraic description of its complexity, but offers a bit complexity of (d° log gq) te), 
9 was originally shown to be 1+e but we may take 9 = 1. To allow for the incorporation of the Kedlaya 
& Umans modular composition algorithm this work will use a bit complexity model rather than the 
usual algebraic one. 

We will use M(d) to indicate the complexity of multiplying two degree d polynomials over F,. Typi- 
cally, M(d) = (dlog(q))'*?™. Moreover, we let w denote the real number such that two r x r matrices 
with entries in a ring R can be multiplied using at most O(r”) basic ring operations. 


2 Multiplication of Skew Polynomials 


As of this work, there are two major competitive algorithms for multiplying skew polynomials due to 
Puchinger & Wachter-Zeh [PW17] as well as Caruso & Le Borgne [CB17]. 


2.1 The Puchinger & Wachter-Zeh Algorithm 


When s <n, the algorithm described by [PW17, Th.7] has the better bit complexity. Set the factors 
a = xe aa", b = 4, bia", and set d* = [Vd +1]. We can split a into a sum of d* terms of the 
form a = oy digx 452"? +) such that a = oe a, This in turn splits the product c into d* 
terms ¢ = Sa ce with C = ab. We can multiply through the expression for c: 


d*-1 d d+d*-1 , k 
Dex id* +3 k\ _ id* +5 id* +k 
cf) = y Ajax +50 ( bpx ) = y ( y age jo TA Cbp ela ) 
j=0 k=0 


k=0 \j=0 
Construct matrices A, B,C such that: 


Aig =a*™ (aiar4) (1) 
Bin = 0° (be_i) (2) 
Cin =o (cl?) (3) 


Where 0 <i,7 < d*—1,0<k <d+d*—1. We may refer to A and B as the left and right companion 
matrices respectively. Thus, we may compute c by computing the matrix product C = A- B to 
determine the entries o~'” (cl), through which we may compute c = te ade c. The 
computationally intensive steps are computing the action of O(d!/2) distinct automorphisms o*’”’ , a’ 
for up to O(d3/ ?) elements, as well as computing the matrix product. Constructing the companion 
matrices A, B, as well as recovering the final result from the matrix product AB takes overall time 
(d3/?n° log q)'+°), while computing the matrix product itself takes O(d™in(@+1)/?.1.635) (7) 


Algorithm 1 Skew Polynomial Multiplication [PW17] 


Input Skew polynomials a,b € Fyn {x; a} of degree at most d. 
Output Skew polynomial c such that a-b=c 


Construct matrices A, B as given in equations 1 and 2. 
Compute the product C = A- B. 

Compute cl) =a (Ci) 

Compute and return the product c = ae a ee ct) 


2.2 The Caruso & Le Borgne Algorithm 


Here we will provide an overview of the algorithm given in [CB17, Sec.2]._ The critical insight of 
the algorithm is their proposition 1.6, which relates the action of skew-polynomials to commutative 
multiplication modulo T” — 1. We restate the proposition here: 


Proposition. [CB17, Prop. 1.6] Let T be a commutative variable, and fix a normal basis s9,..., 8,—1 
for Fyn /F, and let s = <=), si". Further let a = ey ae? € Fgn{x; 0} and set a(T) = 0) aT’, 
c, = a(s;) and c(T) = )>¢;T". Then 


c(T) =a(T)s(T) mod T” —1 


Namely, the above proposition reduces computing the action of a on a normal basis to commuta- 
tive polynomial multiplication when both are considered modulo T” — 1. Given any two a,b € 
Fan {x;o}/(2” — 1), the product ab € Fy»{z;0}/(x”" — 1) can be computed as follows: 

The main computational bottlenecks are the computation of the matrix product MBM", which costs 
O(n”) F, operations, as well as the construction of a normal basis for Fg» over Fy. 

A related algorithm is optimal when dega + degb = d < n. This version proceeds by computing 
the action of 6 on a partial normal basis {sg,..., sq} of size d+ 1 and determining the corresponding 
matrix. By computing the polynomial c(T’) as done previously, the matrix for the action of a on the 
entire normal basis can be determined, and multiplying these two matrices together requires an n x n 
with n x (d+ 1) matrix product and gives the action of ab on {50,...,sa}, from which ab may be 
interpolated. Using their algorithms for doing interpolation and evaluation on a partial normal basis, 
they devise a run-time complexity of O(d®~?nM(n)) plus the cost of constructing a normal basis. 


Algorithm 2 Skew Polynomial Multiplication [CB17] 


Input Skew polynomials a, b € Fyn {x;o} of degree at most d. 
Output Skew polynomial c such that a-b =c 


1: Compute c(T) = a(T)s(T), ¢ (LT) = v(T)s(T). 

2: Extract from c,c’ the matrices M,, M, respectively for the action of a,b on Fgn/F, where the 
domain uses the normal basis and the co-domain uses the standard basis. 

3: Compute M,BM, where B is the change of basis matrix from the standard basis to the normal 
basis. This gives the action of the product ab on Fg» /Fy. 

4: Given the product M,BM, compute the corresponding ¢(T’) such that és~'(T’) = a(T)b(T) and 
extract the coefficients of ab 


3 Multiplication of Matrices over Rings of Skew Polynomials 


Given the intricacies of direct multiplication of skew polynomials, there are a few opportunities to 
examine whether improvements over naive estimates of the complexity of matrix multiplication can 
be achieved. For skew polynomial matrices a = )7*_,a;2*, B = Se, b;x* where aj,b; are r x Tr 
matrices with entries al®, b! a= Fy» one can use any skew multiplication algorithm as a black box to 
obtain a matrix multiplication algorithm yielding a complexity O(r*SM@) where SM(d) denotes the 
complexity of the chosen skew multiplication algorithm. To improve on this, the general approach we 
will use to leverage existing multiplication algorithms can be summarised as follows: 


1. Apply a pre-processing step to the coefficients of the matrices a,b, which transforms matrices 
over Fgn{x;o} to matrices over a ring with more computationally efficient multiplication. 


2. Apply a black box matrix multiplication algorithm. 


3. Recover the skew polynomial entries of the product. 


For multiplying skew polynomials modulo «” — 1, we will recall that there is an isomorphism: op : 
‘gn {x3 o}/(a” — 1) > Endg, (Fy) taking skew polynomials right-modulo x” — 1 into the F,-linear 
endomorphisms of Fy». This sets a tight complexity bound of O(r’n”) for multiplication inside 
‘an {a3}/(a" — 1). 

Note that the transform sending a skew polynomial to its left or right companion matrix is linear. 
Therefore, the algorithm of Puchinger and Wachter-Zeh can be modified to fit the general spproach 
as follows: 


1. Compute A, an r x r matrix whose entries A?* are square matrices of size d* over Fyn equal 
Dp , q qr &F”d 


to the left companion matrix of a/** Sy, a?’*x'. Similarly, B is an r x r matrix with rectangular 


entries Bi corresponding to the right companion matrices of b/* = 30, b?* xt 
2. Compute C= A- B. 


3. Apply the inverse transform of step 4 in algorithm 1 to compute the skew-polynomial corre- 
sponding to the block C*? = S0),_, A°* BP, 


Applying the naive algorithm directly yields a bit complexity of r?(d*2 n9 log q)! +0) -amin( S$ 1-635) Yy(n), 
The above procedure however has an overall complexity consisting of two components: (r2d*2~ n® log q)!+° 
term coming from the entry-wise transform and inversion of the companion matrices and their product, 

as well as r# qmin(“3" 1.635) yg (n) coming from the black-box multiplication of the block matrices. 

When n?/@-”) < d <n, using the Small Degree Multiplication algorithm from [Algorithm 5; 
CB17] is asymptotically optimal. This too admits a more nuanced extension of the algorithm to the 


matrix multiplication setting. In particular, one may perform the partial evaluations of the right- 
side operators b/* and the total evaluation of a/* entrywise, and then perform interpolation on the 
resulting block-wise product. In addition to the cost of constructing the normal basis, preparing the 
block entries, as well as the final interpolation step, takes time O(r?nM(n)). The main bottleneck 
is the block-wise multiplication step, which takes overall time O(d’~?n?r”), which eliminates any 
possible complexity gains over the naive approach. 
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